[SOLVED] DHCP: update a foreign (to OPNSense) nameserver with nsupdate/t-sig?

[lrosenman]

I'm coming back to OPNSense after a LONG break and was wondering if the DHCPD in current production can support doing DNS updates to a foreign (to OPNSense) DNS server (my server on a different network, using BIND 9.13.x) via an NSUPDATE type message, but using T-SIG keys?

[lrosenman]

Basically if we're using ISC DHCPD, where can I add statements to the dhcpd.conf that won't get wiped by the GUI making changes.

[lrosenman]

Well, I'll be.... If I set up a static address on an interface, I get the ability to set all this up already.

Never mind.

[franco]

Hey,

Indeed, from the original topic it was hard to infer that dynamic interface configuration got in the way of enabling DHCPD, but I'm glad it's all there. :)

Also: Welcome back!


Cheers,
Franco

[lrosenman]

working great with https://github.com/aus/pfatt (with a minor mod to skip some pfSense specifics).

Now I can get all the info I need/want, and it all works.

Thanks for a great product! (running on an old protectli FW1).

[franco]

Neat. Are you also running 6RD on this?


Cheers,
Franco

[lrosenman]

Nope.  ATT went native IPv6 a long while ago, so it's pure IPv6. no 6RD.

[lrosenman]

BTW, any chance of y'all making a plugin for the aus/pfatt stuff?